fastdpi_stat.log

The file is placed in the directory: /var/log/dpi/fastdpi_stat.log

This log contains statistics on traffic processed and blocked by VAS Experts DPI, on memory and processor load (file stat.log).

Image 1

Information is presented as follows (see Image 1, Image 2):

Memory used:
1 – date and time of data accessing,
2 – memory type,
3 – information volume.

CPU load:
4 – general load,
5 – load by cores.

Statistics on VAS Experts DPI interfaces:
6 – full statistics on received packets/bytes, blocked packets on all interfaces,
7 - full statistics on received packets/bytes, blocked packets on the dna0 interface, here:

Rcvd: [2372621 pkts][381635326 bytes][0 pkts dropped] – received packets/bytes

Send: [4457954 pkts][4526709192 bytes] – transmitted packets/bytes

Esnd: [0 err_pkts][0.00 %] - errors occurred while sending packets

Drop: [0 pkts][0 bytes] – blocked packets/bytes

Pthr: [0 pkts][0 bytes] – the number of packets/bytes passing without analysis and processing

Emit: [0 pkts][0 bytes] – packets formed by VAS Experts DPI

Eemt: [0 err_pkts][0.00 %] - errors that occurred when sending packets generated by VAS Experts DPI

8 – actual statistics on received packets/bytes, blocked packets on dna0 interface,
9 – full statistics on the number of captured, processed, sent packets/sec (see Image 2), e.g. [Captured 1.47 pkt/sec][Processed 1.47 pkt/sec][Send 0.00 pkt/sec].
IPv4_thread_slave=#1 or 0 – flow statistics (0 or 1) – flow number.

Image 2

Protocol statistics:

Statistics by IP:
10 – current flows number, here
IPv4_total : allocate=1708/3008000 – parameter is set in /etc/dpi/fastdpi.conf:
mem_tracking_flow (e.g.=3008000)
3008000 – total / 1708 – taken

Blocking counters:
url/lock=341/5 ( 0,0 )( 1,1,0,98879 )
ssl/lock=47/0 ( 21,457 )( 0,69,69,196647 )
chnprc=0
ccheck/ip_check/lock=2954/503/76
url/lock – URL checked/blocked

( 0,0 ) :
first 0 – number of URLs that could not be parsed
second 0 – number of packets with partial URLs (URL in several packages)
( 1,1,0,98879 ) :
1 – parsers used
1 – parsers were used in total
0 – how many parsers are not involved after use
98879 –

how many parsers can be created

ssl/lock – similarly to URL, but for cname
chnprc=0 – parser change http ←→ htpps
ccheck/ip_check/lock – 2954/503/76 statistics on check by IP/port

2954 – were to check by IP
503 – how many times the check was actually performed
76 – packets blocked

Firewall statistics – 11.

Netflow statistics – 12,

In version 9.4.1 statistics on packet sizes have been expanded, Jumbo Frames have been added
[STAT ][2020/09/09-13:44:33:322801] Packet size (abs/delta, in %):

<=64 <=128 <=256 <=512 <=1024 <=2048 <=4096 <=8192 >8192
subs->inet: 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0
inet->subs: 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0 0.0/0.0